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IN THE CLAIMS: 

Please cancel claims 33-42, without prejudice or disclaimer. 

Please amend claims 1,16, 22, 26, and 30-32; and add new claims 43-52 as follows: 
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1 . (currently amended) A system for conducting a transaction with privacy on a 
wide area network, said system comprising: 

a personal access device (PAD) contained in a manually portable housing and 
associated with a subscriber to said system, said manually portable PAD storing a profile of the 
subscriber and generating interactive commands transmitted wirelessly ; 

a privacy service provider (PSP) connected to the wide area network, said 
manually portable PAD being directly accessible by said PSP under first conditions set by said 
profile and said PSP being responsive in real-time to the interactive and wirelessly transmitted 
commands from said manually portable PAD; 

a registered vendor (RV) connected to the wide area network; and 

a privacy shield network (PSN) connected to the wide area network, said RV 
being registered with said PSN and said PSN being structured to carry communications between 
said PSP and said RV related to the transaction under second conditions set by said profile. 

2. (original) The system of claim 1, wherein said PAD stores private data 
associated with the subscriber, and wherein said PSP releases any of said private data to said RV 
only under said first and second conditions. 

3. (original) The system of claim 2, wherein said PSP also stores said profile 
and said private data. 

4. (original) The system of claim 1, wherein said PSP controls access by said 
RV to said PAD under said first and second conditions. 
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5. (original) The system of claim 1, wherein said PSP includes a network server. 

6. (original) The system of claim 1, wherein said RV includes a network server. 

7. (original) The system of claim 1, wherein said PSN includes a network 

server. 

8. (original) The system of claim 1, wherein said PSP controls access by said 
RV to said profile under said second conditions. 

9. (original) The system of claim 1, further comprising a second registered 
vendor (RV) connected to the wide area network, said PSP being accessible by said second RV 
under third conditions set by said profile, said second RV being accessible by the first mentioned 
RV under fourth conditions set by said second RV and said first RV being accessible by said 
second RV under fifth conditions set by said first RV. 

10. (original) The system of claim 9, wherein said second conditions include 
authorization conditions for authorizing the transaction among said PAD, said first RV and said 
second RV. 



4 



204,896 

1 1 . (original) The system of claim 10, wherein said authorization conditions 
include a first authorization for authorizing said second RV to complete an intermediate 
transaction with said first RV. 

12. (original) The system of claim 1 1, wherein said first authorization is sent 
from said PSP to said second RV over said PSN, said PSN preventing said first RV from access 
to first authorization. 

13. (original) The system of claim 1, wherein said second conditions include 
authorization conditions for authorizing the transaction between said PAD and said RV. 

14. (original) The system of claim 13, wherein said authorization conditions 
control whether said first RV is authorized to request a response from said PAD. 

15. (original) The system of claim 1, wherein the wide area network is the 
Internet. 

1 6. (currently amended) A personal access device (PAD) associated with a 
subscriber for conducting a transaction with privacy on a wide area network, said PAD 
comprising: 

a manually portable housing; 

a memory for storing a profile of the subscriber; 

a manually actuable command generator for generating interactive commands; 
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a wireless transmitter for wirelesslv transmitting the interactive commands to a 
privacy service provider (PSP) directly accessible to the manually portable PAD, with the PSP 
being responsive in real-time to the wirelesslv transmitted interactive commands, and with the 
PSP being connected to the wide area network; and 

a receiver for receiving authorized requests from the PSP, the PSP directly 
communicating with said PAD under first conditions set by said profile, each authorized request 
having been received by said PSP over a privacy shield network (PSN) connected to the wide 
area network from a registered vendor (RV) or another privacy service provider, the RV being 
registered on the PSN and communicating with the PSP under second conditions set by said 
profile. 

17. (original) The PAD of claim 16, wherein the PSP receives first requests over 
the PSN and determines which ones of the first requests are authorized requests under said first 
conditions set by said profile. 

18. (original) The PAD of claim 17, wherein if the PSP determines that one of 
the first requests is not an authorized request, the PSP selectively responds to this first request 
over the PSN under second conditions set by said profile. 

19. (original) The PAD of claim 16, wherein said PAD is in the form of a 
selected one of a key chain fob, a pen, a cellular phone, a personal digital assistant, a computer 
and a card. 
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20. (original) The PAD of claim 16, wherein said PAD stores private data 
associated with the subscriber, and wherein the PSP releases any of said private data to the RV 
only under said first and second conditions. 

21 . (original) The PAD of claim 20, wherein the PSP also stores said profile and 
said private data. 

22. (currently amended) A privacy service provider (PSP) for facilitating 
communications between a privacy shield network (PSN) and a personal access device (PAD) 
associated with a subscriber to the PSN, where the PAD stores a profile of the subscriber and 
where said PSP and the PSN are connected to a wide area network, said PSP comprising: 

a receiver for receiving interactive commands transmitted wirelessly from the 
PAD , wherein the PAD is contained in manually portable housing ; 

a server , responsive in real-time to the wirelessly transmitted interactive 
commands from the manually portable PAD, for communicating with a registered vendor (RV) 
over the PSN under first conditions set by said profile and in accordance with wirelessly 
transmitted interactive commands received from the PAD, said server also for receiving first 
requests from the RV and for determining which ones of the first requests are authorized requests 
under second conditions set by said profile; and 

a transmitter for transmitting in real-time the authorized requests to the PAD. 

23. (original) The PSP of claim 22, wherein said server is for communicating 
with a plurality of RVs over the PSN in the same way as with the first-mentioned RV. 
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24. (original) The PSP of claim 22, wherein the PAD stores private data 
associated with the subscriber, and wherein said PSP releases any of said private data to the RV 
only under said first and second conditions. 

25. (original) The PSP of claim 24, wherein said PSP also stores said profile and 
said private data. 

26. (currently amended) A privacy shield network (PSN) connected to a wide area 
network, said PSN controlling communications among a plurality of privacy service providers 
(PSPs) and a plurality of registered vendors (RVs), where each PSP is directly controlled by 
interactive commands transmitted wirelesslv in real-time from a respective personal access 
device (PAD) contained in a respective manually portable housing and associated with a 
respective subscriber to said PSN and is further controlled under conditions set by a profile 
associated with the respective subscriber stored in the respective PAD, said PSN comprising: 

a first server structure for controlling registration of vendors as RVs, where said 
PSN prevents transfer of communications from unregistered vendors to any of the PSPs and 
RVs; and 

a second server structure for controlling communications using the wide area 
network from any of the PSPs and RVs to any of the PSPs and RVs, 

wherein said second server structure controls any communication in real-time 
between a first one of the PSPs and any other one of the PSPs and RVs under conditions set by 
the profile stored in the PAD and controlled by the first PSP , with the real-time control of 
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communications performed by the interactive commands transmitted wirelesslv from the 
manually portable PAD directly accessible to each PSP . 

27. (original) The PSN of claim 26, wherein said second server structure controls 
routing of communications from any of the PSPs and RVs to any of the PSPs and RVs over the 
wide area network. 

28. (original) The PSN of claim 26, wherein each PAD stores private data 
associated with the respective subscriber, and wherein the associated PSP releases any of said 
private data to any of the PSPs and RVs only under said first and second conditions. 

29. (original) The PSN of claim 27, wherein at least one of the PSPs also stores 
said profile and said private data of the respective subscriber. 

30. (currently amended) A method of conducting a transaction with privacy using a 
privacy shield network (PSN) connected to a wide area network, said method comprising the 
steps of: 

storing a profile of a subscriber to the PSN in a personal access device (PAD) 
contained in a manually portable housing and associated with the subscriber; 
generating interactive commands using the PAD; 
wirelesslv transmitting the interactive commands from the PAD; 
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directly accessing the PAD in real-time under first conditions set by the profile 
using a privacy service provider (PSP) connected to the wide area network, the PSP being 
controlled by the wirelessly transmitted interactive commands from the PAD; 

registering a vendor with the PSN as a registered vendor (RV) connected to the 
wide area network; and 

carrying communications between the PSP and the RV related to the transaction 
under second conditions set by the profile using the PSN. 

3 1 . (currently amended) A method of using a personal access device (PAD) 
associated with a subscriber for conducting a transaction with privacy on a wide area network, 
said method comprising the steps of: 

storing a profile of the subscriber in a memory contained in a manually portable 
housing of the PAD ; 

generating interactive commands in the PAD; 

wirelessly transmitting the interactive commands to a privacy service provider 
(PSP) directly accessible to the PAD and connected to the wide area network; and 

receiving authorized requests from the PSP, the PSP communicating in real-time 
with the PAD under first conditions set by the profile, each authorized request having been 
received by the PSP under the control of a privacy shield network (PSN) connected to the wide 
area network, the RV being registered with the PSN and communicating with the PSP under 
second conditions set by the profile. 
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32. (currently amended) A method of using a privacy shield network (PSN) 
connected to a wide area network to control communications among a plurality of privacy 
service providers (PSPs) and a plurality of registered vendors (RVs), where each PSP is directly 
controlled by interactive commands transmitted wirelessly from a respective personal access 
device (PAD) contained in a respective manually portable housing and associated with a 
respective subscriber to the PSN and is further controlled under conditions set by a profile of the 
respective subscriber stored in the respective PAD, said method comprising the steps of: 

using a first service structure for controlling registration of vendors as RVs, where 
the PSN prevents transfer of communications of unregistered vendors to any of the PSPs and 
RVs; and 

using a second server structure for controlling communications using the wide 
area network from any of the PSPs and RVs to any of the PSPs and RVs, 

wherein the second server structure controls any communication in real-time 
between a first one of the PSPs and any other one of the PSPs and RVs under conditions set by 
the profile , with the real-time control of communications performed by the interactive commands 
transmitted wirelessly from the manually portable PAD directly accessible to each PSP . 

Claims 33-42 (canceled). 
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43. (new) A system for a plurality of individual subscribers to receive and 
transmit communications via the Internet, the system comprising: 

an XML privacy service provider (PSP) linked to the Internet for communication; 

a plurality of private XML subscriber data files accessible to said PSP, each file 
being associated with a respective subscriber; 

a subscriber programmable personal access device (PAD) contained in a manually 
portable housing for each subscriber to access the respective file and to directly communicate in 
real-time with said PSP using interactive commands transmitted wirelessly from the PAD; and 

a plurality of registered vendors (RVs) linked to the Internet for communication 
with the subscribers under conditions set by the respective files through said PSP. 

44. (new) The system of claim 43, wherein said PSP comprises: 
means for receiving communications from a subscriber; 

means for transmitting a subscriber's file to that subscriber and for changing data 
in the subscriber's file in response to the subscriber's authorization; and 

means for communicating with an RV in connection with a subscriber's file. 

45. (new) The system of claim 43, wherein each XML subscriber data file 
includes at least one of the following: 

subscriber identifying data; 

subscriber credit account data; 

subscriber cash account data; 

subscriber product preference identifiers; and 
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subscriber product exclusion identifiers. 

46. (new) The system of claim 43, wherein each PAD comprises: 
a CPU, an operating system and a memory device; 

a battery; 

a wireless RF communication chip; 

an input/output interface; and 

an encryption key embedded in removable ROM. 

47. (new) A portable battery-powered personal access device (PAD) for use 
in a system for a plurality of individual subscribers to receive and transmit private personalized 
communications via the Internet, the system comprising an XML privacy service provider (PSP) 
linked to the Internet for communication, a plurality of private XML subscriber data files 
accessible to the PSP, each file being associated with a respective subscriber, said PAD being for 
each subscriber to access the respective file and communicate with the PSP, and a plurality of 
registered vendors (RVs) linked to the Internet for communication with the subscribers under 
conditions set by the respective files through the PSP, said PAD comprising: 

a manually portable housing; 

at least one programmable integrated circuit (IC) device that includes encrypted 
identification means; 

non-directional, short-range communication signal generation and receiving 
means for wirelessly transmitting interactive commands directly to the PSP in real-time; 

a CPU, an operating system and a memory device; and 
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an input/output interface. 

48. (new) The PAD of claim 47, wherein said IC device is removable from 
said PAD. 

49. (new) The PAD of claim 47, wherein the encrypted identification means 
is a unique digital code embedded in ROM. 

50. (new) The PAD of claim 49, wherein said IC device is preprogrammed to 
disable the identification means in the event that security of the unique digital code is breached. 

5 1 . (new) The PAD of claim 47, further comprising a housing, an electronic 
display visible through an aperture in said housing and at least one manual actuator for 
controlling functions of said PAD. 

52. (new) The PAD of claim 5 1 , further comprising a microphone having an 
on/off switch and a voice recognition program that converts voice to digital data for storage in 
said memory device! 
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